Is Statseeker exposed to the eMudhra CA Compromise?

We have completed an assessment of the "Leaked CA certificates" issue and confirmed the following:

• Affected version: Statseeker 26.3 includes the affected eMudhra CA certificates in its trusted store.
• Potential impact: Under certain circumstances, an attacker could impersonate a trusted external service and potentially intercept sensitive information or manipulate communications.
• Exploitability: Successful exploitation would require an attacker to intercept or redirect network traffic and present a certificate accepted by the affected trust configuration. The presence of the affected certificates alone does not provide an attacker with access to Statseeker or its network traffic.
• Primary exposure: Outbound HTTPS / TLS connections from Statseeker to external services and integrations (e.g Meraki or Kafka).
• Remediation: Statseeker 26.4 will include an updated CA certificate store that addresses this issue.

Please note: We do not have a release date for Statseeker 26.4 at this point but this version should be available in mid to late November.